VulnerabilityModified
CVE-2018-4145
Multiple memory corruption issues were addressed with improved memory handling.
HIGH 8.8EPSS 2.10%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.10%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.3, tvOS 11.3, watchOS 4.3, Safari 11.1, iTunes 12.7.4 for Windows, iCloud for Windows 7.4.
- CVSS 3.0
- 8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 2.10% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/safari · apple/iphone os · apple/tvos · apple/watchos · apple/icloud · apple/itunes
- Source
- product-security@apple.com
References
- https://support.apple.com/kb/HT208693Vendor Advisory
- https://support.apple.com/kb/HT208695Vendor Advisory
- https://support.apple.com/kb/HT208696Vendor Advisory
- https://support.apple.com/kb/HT208697Vendor Advisory
- https://support.apple.com/kb/HT208698Vendor Advisory
- https://support.apple.com/kb/HT208852Vendor Advisory
- https://support.apple.com/kb/HT208933Vendor Advisory
- https://support.apple.com/kb/HT208693Vendor Advisory
- https://support.apple.com/kb/HT208695Vendor Advisory
- https://support.apple.com/kb/HT208696Vendor Advisory
- https://support.apple.com/kb/HT208697Vendor Advisory
- https://support.apple.com/kb/HT208698Vendor Advisory
- https://support.apple.com/kb/HT208852Vendor Advisory
- https://support.apple.com/kb/HT208933Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.